cve.bz

CWE-125: Out-of-bounds Read, page 46

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2026-0708EPSS 0.4%

    A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault)…

  2. 5.4CVE-2025-69693EPSS 0.3%

    Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only checks the lower bound (qp < 0) but is missing upper bound validation. The qp value can reac…

  3. 9.1CVE-2025-69808EPSS 0.4%

    An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS) via supplying a crafted packet.

  4. 7.4CVE-2026-4227EPSS 0.7%

    A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 of the file /goform/get_hidessid_cfg. The manipulation leads to buffer overflow. It is possible to initiate the attack r…

  5. 7.1CVE-2026-3442EPSS 0.3%

    A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted …

  6. 7.1CVE-2026-3441EPSS 0.2%

    A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially …

  7. 7.0CVE-2026-28521EPSS 0.2%

    arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to victim devices, causing out…

  8. 5.3CVE-2025-71264EPSS 0.3%

    Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).

  9. 7.5CVE-2026-32320EPSS 0.2%

    Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, res…

  10. 7.5CVE-2026-32319EPSS 0.3%

    Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core…

  11. 9.1CVE-2026-31897EPSS 0.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0. The function dereferences *srcp (which points to pSrcData) without firs…

  12. 9.4CVE-2026-31885EPSS 0.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and step_index values from input data. This vulnerability is fix…

  13. 8.5CVE-2026-0956EPSS 0.2%

    There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requir…

  14. 8.5CVE-2026-0955EPSS 0.2%

    There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requir…

  15. 1.9CVE-2026-4012EPSS 0.1%

    A vulnerability was determined in rxi fe up to ed4cda96bd582cbb08520964ba627efb40f3dd91. The impacted element is the function read_ of the file src/fe.c. This manipulation with the input 1 causes out-of-bounds read. The attack requires loc…

  16. 1.9CVE-2026-4009EPSS 0.1%

    A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwav_read_pcm_frames_s16__msadpcm in the library src/audiosource/wav/dr_wav.h of the component WAV File Parser. The manipulation leads to out-of-…

  17. 6.9CVE-2025-15038EPSS 0.1%

    An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL  request, potentially leading to a disclo…

  18. 8.8CVE-2026-3926EPSS 0.2%

    Out of bounds read in V8 in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

  19. 8.8CVE-2026-3920EPSS 0.3%

    Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  20. 9.6CVE-2026-3916EPSS 0.4%

    Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  21. 1.9CVE-2026-3950EPSS 0.1%

    A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to b…

  22. 1.9CVE-2026-3949EPSS 0.1%

    A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument size can…

  23. 7.5CVE-2026-21888EPSS 0.3%

    NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() accepts 5-byte varints without bounds checks; reliably triggers OOB read / crash when built with A…

  24. 3.3CVE-2025-70330EPSS 0.2%

    Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds me…

  25. 5.5CVE-2026-27270EPSS 0.2%

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitat…

  26. 5.5CVE-2026-27268EPSS 0.2%

    Illustrator versions 29.8.4, 30.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitat…

  27. 7.8CVE-2026-27269EPSS 0.2%

    Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerabili…

  28. 5.5CVE-2026-27219EPSS 0.2%

    Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Explo…

  29. 5.5CVE-2026-27216EPSS 0.2%

    Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Explo…

  30. 5.5CVE-2026-21365EPSS 0.2%

    Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Explo…

  31. 6.1CVE-2026-31797EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine() when iccApplyProfiles processes a crafted TIFF image, causing memory …

  32. 5.5CVE-2026-31794EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault from invalid/wild pointer read in CIccCLUT::Interp3d() causing a denial of service. This vulnerabi…

  33. 5.5CVE-2026-31793EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence() causing denial of service.…

  34. 5.5CVE-2026-30986EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in CIccMatrixMath::SetRange() causing memory corruption or crash. This vulnerability…

  35. 6.1CVE-2026-30984EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccCalculatorFunc::ApplySequence() causing an application crash. This vulnerability is fi…

  36. 6.1CVE-2026-30982EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CIccPcsXform::pushXYZConvert() causing crash and potentially leaking memory contents. This…

  37. 6.1CVE-2026-30981EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlArrayType<>::DumpArray() causing out-of-bounds read and/or crash. This vulnerabil…

  38. 7.5CVE-2026-26127EPSS 2.1%

    Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

  39. 7.8CVE-2026-26109EPSS 0.4%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  40. 7.5CVE-2026-25181EPSS 1.5%

    Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

  41. 5.5CVE-2026-25180EPSS 0.7%

    Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

  42. 7.8CVE-2026-25175EPSS 0.4%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-25174EPSS 0.4%

    Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

  44. 5.5CVE-2026-24282EPSS 0.4%

    Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

  45. 7.8CVE-2026-23673EPSS 0.4%

    Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-23672EPSS 0.4%

    Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

  47. 4.4CVE-2026-30935EPSS 0.1%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted ima…

  48. 8.1CVE-2026-28693EPSS 0.3%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixe…

  49. 4.8CVE-2026-28692EPSS 0.3%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. Th…

  50. 7.5CVE-2026-3631EPSS 0.9%

    Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.